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1.  Introduction 


The  System  Capabilities  Analytic  Process  (SCAP)  is  an  emerging  methodology  that  allows  an 
individual  who  is  analyzing  a  system  to  determine  that  system’s  remaining  capability  after  the 
loss  of  critical  components.  SCAP  is  currently  undergoing  several  trials  in  support  of  Army  Test 
and  Evaluation  Command’s  (ATEC)’s  Mission-Based  Test  and  Evaluation  (MBT&E)  initiative. 

On  March  2,  2010,  Mr.  Kevin  Agan  of  the  U.S.  Army  Research  Laboratory, 
Survivability/Lethality  Analysis  Directorate  (ARL/SLAD)  presented  “A  Process  for  Mapping 
Component  Function  to  Mission  Completion  ”,  which  is  an  overview  of  the  SCAP  methodology. 
This  presentation  occurred  at  the  National  Defense  Industrial  Association  (NDIA)  26th  Annual 
Test  and  Evaluation  (T&E)  conference,  located  in  San  Diego,  CA  from  March  1-4,  2010.  As  the 
conference  was  unclassified,  all  material  had  to  be  public  release.  Therefore,  all  examples  of  the 
live-fire  analysis  that  were  then  used  to  test  SCAP  outputs  were  not  briefed  and  are  not  included 
in  this  report. 

The  conference  was  sponsored  by  the  National  Defense  Industrial  Association  (NDIA)  and 
supported  by  the  Office  of  the  Under  Secretary  of  Defense  (AT&L)  and  the  Director, 

Operational  Test  and  Evaluation  (DOT&E).  The  theme  of  the  conference  was  “defense  test  and 
evaluation  in  a  net-centric  world”.  The  intent  of  the  conference  was  to  share  ideas  and 
methodologies  within  the  Department  of  Defense  (DoD),  supporting  contracts  and  system 
developers  that  could  improve  Test  and  Evaluation  (T&E)  of  combat  systems  that  operate  in  the 
net-centric  combat  environment  that  currently  exists  on  the  modern  battlefield.  As  the 
conference  postulated  that  T&E  of  a  combat  system  as  an  isolated  entity  may  not  provide 
adequate  results,  SCAP  was  presented  as  a  way  to  bridge  capabilities  between  multiple  systems 
and  ultimately  provide  a  means  to  identify  remaining  mission  utility  when  a  system  within  a 
family  of  systems  is  attacked. 

The  presentation  was  well  attended  by  representatives  from  multiple  DoD  organizations,  contract 
support  companies,  and  hardware  developers.  Also  in  attendance  were  about  10  individuals  of 
either  the  Senior  Executive  Service  (SES)  or  retired  General  officers.  The  audience  actively 
engaged  in  a  question  and  answer  session  with  follow-on  discussions  that  lasted  about  1/2  h  after 
the  concluding  remarks.  Several  organizations  have  expressed  interest  in  acquiring  the 
completed  methodology  and  considerable  feedback  was  received  on  ways  to  improve  SCAP  so 
that  it  could  be  utilized  across  the  DoD. 

It  was  assumed  that  the  audience  at  the  workshop  was  familiar  with  traditional  methodologies  for 
T&E,  as  well  as  vulnerability  analysis.  Because  of  this  familiarity,  the  enclosed  briefing  does 
not  describe  the  traditional  methodology.  The  traditional  methodologies  are  well  documented 
and  some  sources  are  identified  in  the  references. 


1 


The  following  report  is  the  presentation  as  it  was  presented  at  the  conference.  All  of  the  figures 
are  the  briefing  slides  as  they  were  shown  at  the  conference,  and  the  body  of  the  report  is  the 
talking  points  related  to  each  slide. 


2.  Slides 


The  objective  of  the  presentation  is  to  inform  the  T&E  community  of  how  SCAP  could  be 
applied  to  the  analysis  of  combat  vehicles.  The  general  process  will  be  explained  and  some 
sample  compilations  will  be  provided.  For  a  system  of  systems  (SoS),  it  will  be  shown  how  the 
map  between  the  component  and  capability  for  each  vehicle  can  connect  to  correlating 
capabilities  of  another  system.  Feedback  will  be  solicited  that  can  be  used  to  improve  and 
enhance  this  process. 


TECHNOLOGY  DRIVEN.  WARFIGHTER  FOCUSED. 

A  Process  for  Mapping  Component  Function 

to  Mission  Completion 

2010  Mar  02 

UNCLASSIFIED 


Figure  1.  Title  slide. 

Figure  1  depicts  the  title  slide  of  the  presentation. 


2 


nnFCOM^  Contact  and  Special  Thanks 


Kevin  Agan  is  a  mechanical  engineer  for  the  ARL/SLAD.  Primary  responsibilities  include 
engineering  analysis  of  ground  combat  systems  and  live-fire  damage  assessments  in  support  of 
Title  X.  Prior  to  his  career  with  SLAD,  Mr.  Agan  worked  for  12  years  in  the  private  sector  under 
various  roles.  These  roles  include  new  product  design,  manufacturing,  reliability  engineering, 
finite  element  analysis,  and  electrical-mechanical  packaging. 

William  Landis  works  alongside  of  Mr.  Agan  and  has  similar  primary  responsibilities.  Over  the 
last  several  months  Mr.  Landis  has  been  a  major  contributor  to  the  development  of  the  SCAP 
methodology.  His  efforts  on  the  development  of  sample  data  using  on  a  pilot  program  have  been 
significant  and  invaluable. 

The  contact  information  for  both  Mr.  Agan  and  Mr.  Landis  can  be  found  in  figure  2. 
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RDFCOM 


Agenda 


m 


•  Issue  /  Introduction 

•  Paradigm  Preview 

•  A  Required  Tool:  Fault  Tree  Analysis 

•  Paradigm  Explanation 

•  The  Mission  and  Means  Framework 

•  Example:  A  simple  Tank  Battle 

•  Example:  Networked  UAV  and  SPH 

TEC  HNOLOCY  DRIVES.  WARFIGHTER  FOCUSED. 
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Figure  3.  Agenda. 

The  agenda  for  this  presentation  is  depicted  in  figure  3. 
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RDFCOM^ 


Issue 


PPL 


A  process  is  needed  to  evaluate  the  loss 
of  component  function  in  networked 
systems  to  the  completion  of  the 


mission. 


WARFIGHTER  FOCUSED. 


Figure  4.  Identification  of  the  primary  issue. 

The  primary  issue  that  SCAP  is  intended  to  address  is  shown  in  figure  4.  If  a  system,  or  a  group 
of  systems  known  as  a  SoS,  receives  damage  significant  enough  to  render  critical  components 
dysfunctional,  what  will  be  the  impact  to  the  system’s  capabilities,  as  well  as  the  ability  to 
complete  of  the  required  tasks  and  missions? 
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RnFCOMp  Established  industry  process 


As  a  best  practice,  the  consumer  product 
industry  has  been  conducting  task-based 
component  analysis  for  decades. 


Mission: 


Functionality: 


Task  1 

•  Component  1 

Task  2 

•  Component  2 

Taskn 

♦  Component  n 

WARFIGHTER  FOCUSED. 


Figure  5.  An  established  industry  process. 

Depicted  in  figure  5  is  a  generic  view  of  the  approach  as  used  by  the  consumer-product  industry 
to  correlate  the  needs  of  the  user  to  the  design  of  the  system.  When  a  user  has  identified  what 
mission  (goals,  job,  etc.)  they  want  to  accomplish,  an  analyst  will  determine  what  tasks  are 
required  to  complete  that  mission.  For  the  sake  of  this  presentation,  an  “analyst”  is  defined  as 
any  individual  who  is  analyzing  a  system  utilizing  SCAP.  After  the  required  tasks  are  identified, 
the  analyst  will  then  identify  what  functionality  would  be  required  to  complete  each  task.  This 
functionality  is  what  each  portion  of  the  design  will  have  to  do  and  is  an  observable  performance 
of  some  kind.  The  analyst  will  then  identify  what  components  will  produce  each  functionality. 


6 


rdecomT^  a  preliminary  process  for  ARL 


A  preliminary  process  has  been  developed 
within  ARL/SLAD  that  can  correlate 
component  availability  to  the  completion  of 
Army  standard  mission  tasks. 

This  process  is  currently  being  tested  and 
improved. 


Figure  6.  A  preliminary  process  for  ARL. 

By  utilizing  relevant  private  industry  experience,  existing  government  efforts,  and  applying 
concepts  from  systems  and  reliability  engineering,  the  consumer  product  process  has  been 
adapted  to  fit  with  efforts  already  in  use  by  various  Army  organizations.  The  adapted  process  is 
known  as  SCAP. 

To  test  the  preliminary  SCAP  methodology,  two  trials  are  underway  at  ARL/SLAD.  The 
prominent  trial  is  conducting  a  vulnerability  analysis  of  a  common  ground  vehicle  using  the 
SCAP  methodology  and  is  leading  the  development  of  vulnerability  outputs  from  our  traditional 
simulation  tools  that  are  in  the  terms  of  system  capabilities  (SCs).  The  second  trial  is  on  a 
ground  vehicle  of  much  higher  complexity.  The  intent  of  the  second  trial  is  to  determine  if  the 
investment  of  resources — for  personnel,  time,  and  computing  hardware — would  be  prohibitive 
for  this  fonn  of  analysis. 

The  synopsis  of  the  preceding  two  discussions  is  depicted  in  figure  6. 
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RDFCOM ^ 


Focus  of  Analysis 


■4 


•  Using  fundamentals  from  systems  and  reliability 
engineering: 

-  Quantitatively  define  what  the  system  and  personnel  can 
accomplish  (tasks). 

-  Quantitatively  define  what  components  are  required  to  accomplish 
these  tasks. 

•  Focus  of  analysis  is  remaining  capability. 

•  Maintain  terminology  familiar  to  the  military  user: 

-  Attainable  Speed 

-  Send/Receive  Communications 

-  Execute  Fire  Missions 


WARFIGHTER  FOCUSED. 


Figure  7.  The  focus  of  the  new  methodology. 

The  focus  of  the  emerging  SCAP  methodology  is  depicted  in  figure  7. 
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A  preview  of  the  process 


Mission  Task 


System  Capabilities 


System  Functions 


Sub- System 


Components 


JRL 


WARFIGHTER  FOCUSED. 


Figure  8.  A  preview  of  the  process. 

Depicted  in  figure  8  is  the  foundation  of  the  SCAP  methodology.  At  the  bottom  are  the  two 
layers  that  immediately  relate  to  the  design  of  the  system:  the  components  and  the  sub-system. 
The  top  layer,  representing  the  mission  task,  is  from  the  Army  Universal  Task  List  (AUTL).  The 
following  slides  will  explain  each  of  these  levels  in  more  detail. 

A  pneumonic  that  was  recently  developed  to  describe  these  layers  is:  “When  Components  are 
assembled  into  Sub-Systems,  they  produce  the  Functions  that  provide  the  Capability  to  complete 
the  Task.” 

Although  SCAP  was  developed  for  the  vulnerability  analysis  of  a  ground  combat  vehicle,  early 
discussions  and  trials  during  methodology  development  indicate  potential  use  of  SCAP  in  a  SoS 
(or  force-on-force)  simulations.  The  theory  is  that  this  map  may  be  able  to  identify  what 
components  are  critical  on  individual  systems  based  on  the  mission  performance  of  the 
networked  systems  after  an  attack.  These  same  conversations  indicate  that  SCAP  could  be  used 
to  map  the  results  of  a  threat  interaction  into  a  mission  scenario — otherwise  known  as  a  vignette 
— and  detennine  how  well  the  family  of  vehicles  can  perform  their  task  after  an  attack. 
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Existing  Tool:  Fault  Tree 


m 


Fault  Tree:  a  logic  diagram  that  represents  operating 
relationships. 

As  long  as  a  functioning  path  can  be  traced  from  beginning  to 
end,  then  the  operation  and/or  capability  is  maintained. 

Each  level  of  the  paradigm  comprises  of  Fault  Tree 
relationships  to  the  level  below. 

Series  Parallel 


Parent 


Parent 


Child  1 


Child  2 


Chid  3 


Child  1 

CNUJ2 

Child  4 
- 1 - 


WARFIGHTER  FOCUSED. 


Figure  9.  The  use  of  an  existing  tool:  fault  trees. 

To  map  between  the  layers  of  SCAP,  a  tool  known  as  the  fault  tree  is  required.  A  fault  tree,  also 
known  as  a  deactivation  diagram,  is  a  logic  diagram  the  represents  the  operating  (functional) 
relationships  of  the  critical  components  within  the  design  of  the  system.  As  long  as  a 
functioning  path  can  be  traced  from  the  beginning  of  the  diagram  to  the  end,  then  the  operation 
and/or  the  capability  represented  by  the  fault  tree’s  “parent”  element  is  maintained  and  available. 
If  this  was  the  case,  then  we  say  that  the  parent  is  functioning  as  intended.  However,  if  the  trace 
through  the  fault  tree  cannot  be  maintained  due  to  a  dysfunctional  child,  then  the  parent  is 
dysfunctional  as  well. 

There  are  two  fundamental  forms  of  a  fault  tree,  and  both  forms  are  depicted  in  figure  9.  The 
first  is  a  series  tree,  which  means  the  dysfunction  of  any  child  on  the  string  will  result  in  a 
dysfunction  of  the  parent.  Note  that  if  multiple  children  are  dysfunctional,  there  is  no  additional 
severity  of  the  dysfunction  of  the  parent  than  if  only  one  child  was  dysfunctional. 
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The  second  form  of  the  fault  tree  is  the  parallel  tree.  In  this  case,  the  children  share  the 
functionality  represented  by  the  in  the  fault  tree  relationship.  To  render  the  trace  through  the 
fault  tree  dysfunctional,  all  children  on  the  parallel  branches  must  be  rendered  dysfunctional. 

It  is  possible  to  combine  series  and  parallel  relationships  in  a  single  fault  tree.  This  combination 
approach  can  allow  for  the  creation  of  highly  complex  relationships  within  a  design. 

Within  SCAP,  a  functional  child  and  parent  are  represented  as  a  binary  value  of  “1”.  If  a  child  or 
a  parent  is  dysfunctional,  then  they  are  represented  as  a  binary  value  of  “0”.  This  allows  for  a 
representation  of  “available”  and  “unavailable”  in  statistical  and  mathematical  representations  of 
the  maps.  This  convention  is  able  to  change  based  on  the  tools  that  are  used  to  complete  an 
analysis  or  simulation,  but  will  be  maintained  for  the  rest  of  this  presentation. 


rdecom^  Components 


•  The  component  is  the  lowest  level  of  the 
analysis. 

•  The  component  is  the  individual  hardware 
that  is  required  for  a  system  to  function. 
-Gear 

-Tire 
-Oil  Filter 
-  Fuel  Tank 


Components 

TECHNOLOGY  DRIVEN  WARFIGHTER  FOCUSED. 
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Figure  10.  Definition  of  components. 

The  components  are  the  lowest  level  of  the  analysis.  They  are  the  physical  parts  of  the  system 
being  analyzed.  For  most  vulnerability  analyses,  data  of  some  level  of  fidelity  is  known  about 
the  design  and  the  function  of  the  components  of  the  system. 

Some  sample  components  are  listed  in  figure  10. 
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RnFcnrvt 


Components 


Pk 


For  each  component,  failure  modes  and  or  operating 
conditions  are  defined. 

-  Standard  operating  conditions 

-  Probability  of  Component  Dysfunction  Given  a  Hit  (PCD|H) 
{Probability  of  Kill  (PK)} 

Consider  all  modes  and  conditions  with  respect  to 
successful  operation  given  an  insult  or  use. 

With  an  insult  to  a  component,  evaluate  to  see  if  it  is 
available  and  functioning. 
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WARFIGHTER  FOCUSED. 


Figure  11.  Components:  further  discussion. 

Figure  1 1  depicts  the  highlights  of  a  further  discussion  of  components.  Existing  methodologies 
and  tools  used  in  vulnerability  analysis  are  able  to  predict  component  losses  based  on  an 
interaction  with  a  known  threat.  In  vulnerability  models  of  a  ground  combat  system,  the 
Probability  of  Component  Dysfunction  Given  a  Hit  (Pcd|h)  and  Probability  of  Kill  (Pk)  represent 
the  probability  that  the  component  will  be  rendered  dysfunctional,  or  “killed”,  when  a  threat  is 
applied  to  the  components.  If  the  component  is  found  to  be  dysfunctional  in  a  SCAP  application, 
a  value  of  “0”  will  be  assigned  in  the  map. 

In  SCAP,  a  component  can  be  rendered  dysfunctional  by  any  means,  not  just  by  ballistic  insult. 

In  other  words,  the  fault  tree  doesn’t  track  why  a  component  will  be  dysfunctional,  just  that  it  is. 
This  allows  for  additional  failure  modes  that  are  not  typical  in  the  traditional  vulnerability 
methodologies,  such  as: 

•  Environmental  effects. 

•  A  component  operating  above  or  below  its  standard  operating  conditions. 

•  Reliability  failure. 
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Nuclear,  chemical  or  biological  contamination. 


This  will  also  allow  for  the  map  generated  by  applying  SCAP  to  a  system  to  be  useful  in  many 
forms  of  analysis  beyond  the  scope  of  ballistic  vulnerability. 


Figure  12.  Definition  of  sub-systems. 

A  sub-system  can  also  be  a  complex  component,  such  as  a  fuel  pump.  Note  that  a  sub-system 
may  contain  both  components  and  sub-systems,  but  components  cannot  contain  sub-systems. 
This  is  the  only  place  in  the  map  that  two  levels  may  be  mixed  within  the  fault  trees.  Figure  12 
depicts  the  sample  of  a  sub-system. 
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System  Functions 
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A  System  Function  is  an  observable,  repeatable,  and 
measureable  performance  of  the  sub-systems. 

Examples: 

•  Maintain  Cooling  (Engine) 

•  Generate  Energy  from  Fuel 

•  Transmit  Electrical  Power 

•  Transfer  Power  to  the  Wheels 


Cooling  sub-system  example: 

To  maintain  the  proper  operating  temperature  of  the  engine, 
the  cooling  system  needs  to  remove  waste  heat  from  the 
system.  The  fans  and  related  drive  trains  are  required  to 
maintain  adequate  air-flow. 
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Figure  13.  Definition  of  system  functions. 

A  system  function  is  defined  in  figure  13.  The  children  within  a  system  function  fault  tree  can 
be  either  sub-systems  or  other  system  functions.  It  is  very  important  to  note  that  one  should 
never  include  a  child  represented  by  a  system  function  with  another  child  represented  by  a  sub¬ 
system  within  the  same  fault  tree  for  a  single  system  function.  A  system  function  will  have  only 
either  other  system  functions  or  sub-systems  as  immediate  children  in  the  fault  tree.  This  is 
essential  to  maintaining  the  integrity  of  the  data  analysis  when  all  fault  trees  are  compiled  into  a 
large-scale  model. 
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System  Functions 


System  Functions  can  be  either  binary  or  probabilistic: 
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Figure  14.  Representation  of  system  functions. 

A  further  discussion  of  system  functions  occurs  within  figure  14.  In  most  mechanical  systems, 
the  representation  of  the  system  function  availability  will  be  a  binary  set:  either  functional  or 
dysfunctional.  Early  feedback  from  the  lethality  analysis  community  has  introduced  the  concept 
of  probabilistic  system  functions  (PSF).  For  a  PSF,  if  all  components  and  sub-systems  are 
functional,  then  the  probability  of  a  system  function  being  available  will  be  based  on  some 
conditions  of  the  system. 

In  the  abstract  example  of  an  infrared  (IR)  sensor  system,  it  is  assumed  all  the  components  are 
fully  functional;  therefore,  the  IR  signal  detection  sub-system  (IR  sensor  system)  is  fully 
functional.  To  determine  if  the  system  function  “detect  IR  signal”  is  functional  or  dysfunctional, 
conditions,  such  as  the  strength  of  the  signal — weak  to  maximum — and  distance  to  the  signal 
will  determine  the  probability  of  functional  or  the  probability  the  system  will  function  as 
intended.  If  a  signal  is  too  weak  to  be  detected,  the  system  function  “detect  IR  signal”  would  be 
dysfunctional  even  if  all  the  components  are  functioning  correctly.  In  the  example  shown,  it  can 
be  seen  that  a  “maximum”  signal  will  be  detected  about  60%  of  the  time  for  a  given  distance  for 
the  sensor  of  interest.  Therefore,  about  60%  of  the  time  when  these  conditions  exist  the  “detect 
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IR  signal”  system  function  will  be  functional,  and  about  40%  of  the  time  it  will  be  dysfunctional. 
Note  that  sometimes  the  probability  of  a  functioning  system  function  can  be  modified  if  the 
conditions  are  changed  in  some  way.  In  a  theoretical  case  of  electronic  warfare  (EW),  the 
presence  of  flares  could  provide  a  stronger  IR  signal  than  the  intended  target.  In  this  case,  the 
probability  of  detection  would  decrease  as  the  sensor  may  detect  the  wrong  signal,  thus  rendering 
a  system  function  as  dysfunctional  even  though  all  components  are  functioning  as  intended. 
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System  Capability 
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•  A  System  Capability  is  a  mutually  independent  performance  of 
the  system. 

•  This  task  is  observable,  measurable,  and  repeatable. 


♦  For  a  light-duty  four-wheeled  vehicle,  some  sample 


System  Capabilities  are: 

•  Operate  in  night  conditions 

System  Capabilities 

•  Travel  off-road 

•  Travel  on-roads 

•  Protect  crew 

System  Functions 

•  Communicate  short-range 

♦  Communicate  long-range 

Sub-System 

♦  Communicate  intr a- vehicle 

•  Haul  trailer 

Components 
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Figure  15.  Definition  of  SCs. 
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The  SC  is  defined  in  figure  15.  The  children  of  a  SC  fault  tree  are  the  required  system  function 
to  produce  that  SC.  Note  that  these  SCs  are  in  a  language  familiar  to  the  military  user,  e.g., 
attained  speed,  engagement  range,  protection  limits. 
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System  Capability  Bins 
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As  damage  is  applied,  a  System  Capability  could  degrade  into 
subsequent  bins  of  performance,  as  seen  below. 


Travel  on  Roads 

Damage  state 

Can  travel  31  to  SO  mph 

Undamaged 

C  an  travel  11  to  30  mph 

Two  flat  tires .  on  run-flats 

Can  travel  1  to  10  mph 

F  our  flat  tires,  on  run-flab 

NOT  possible 

Tires  completed  destroyed 

Communicate  short-range 

Damage  state 

Data  and  voice 

Undamaged 

Data  only 

Hand- mike  failed 

Voice  only 

R  adio  computer  failed 

NOT  possible 

Radio  failed 

At  any  given  time  and  damage  state,  a  system  will  exist  in  only 
one  of  the  bins. 
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Figure  16.  SC  bins. 

When  compiling  SC  from  the  required  system  function,  the  initial  effort  will  map  top 
performance  bin,  otherwise  known  as  the  undamaged  state.  After  the  top  performance  bin  is 
compiled,  it  is  easier,  based  on  industry  experience,  to  compile  the  lower  performance  bins. 
These  lower  performance  bins  are  usually  achieved  by  copying  the  top  level  bin  and  removing 
system  function  as  required.  The  levels  of  the  bins  are  dependent  on  the  design  of  the  system 
and  on  the  context  of  the  capability.  For  example,  the  speed  of  a  wheeled  vehicle  is  dependent 
on  whether  it  is  either  two-  or  four-wheel  drive  and  in  the  context  of  either  on-  or  off-road.  An 
example  of  SC  bins  is  depicted  in  figure  16. 
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Figure  17.  Sample  of  SC  bins. 


The  differences  between  two  SC  bins  are  depicted  in  figure  17.  This  example  is  for  a  theoretical 
light-duty  pickup  truck  found  at  a  used  car  lot.  Note  the  difference  between  the  two  bins.  The 
highlighted  blocks  in  the  “can  travel  11  to  30  mph”  depict  which  system  functions  are  either 
missing  or  different  than  the  top  performance  bin,  the  “can  travel  31  to  50  mph”. 
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Mission  Tasks 
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A  Mission  Task  is  the  operational  task  that  is  to  be  executed  by  the  soldiers 
and  systems  working  in  concert 
•  For  the  Army,  the  Mission  Tasks  are  defined  in 

Field  Manual  (FM)  7-15  "The  Army  Universal  Task  List"  (AUTL). 


Examples  of  Mission  Tasks: 

•  Conduct  a  raid 

•  Conduct  direct  fires 

•  Hold  an  objective 
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Figure  18.  Definition  of  mission  tasks. 

Mission  tasks  are  defined  in  figure  18.  All  mission  tasks  are  composed  of  a  set  of  required  SC. 
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A  Brief  Sample 


PPL 
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Figure  19.  A  sample  SCAP  map. 

Since  all  five  levels  of  the  SCAP  methodology  are  defined,  a  sample  map  is  depicted  in 
figure  19.  This  map  shows  how  components  can  be  used  to  define  the  accomplishment  of  a 
mission  task. 


20 


Figure  20.  A  sample  mission  task  decomposition  to  SCs. 

Depicted  in  figure  20  is  a  theoretical  example  of  a  self-propelled  howitzer  (SPH).  The  SPH  has  a 
mission  to  support  troops  with  indirect  fire  support,  hence  the  AUTL  “conduct  indirect  fires”.  In 
the  fault  tree  that  is  compiled  for  this  example,  “fire  munition”  is  green  because  it  highlights  the 
SC  of  interest  from  the  picture  shown. 
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A  Piece  of  a  Sample 
Mission  Task 


Mission  Task 


Conduct 
Indrect  Fires 
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Figure  21.  A  sample  of  the  map  from  mission  task  to  components. 

The  multi-layered  tree  depicted  in  figure  2 1  is  a  sample  of  the  map  for  a  theoretical  SPH.  This 
map  shows  how  the  components  required  to  open  the  breech  of  the  cannon  are  related  to  the  SC 
of  “fire  munition”  and  the  mission  task  of  “conduct  indirect  fires”.  For  the  sake  of  simplicity, 
the  SC  bins  are  not  depicted  in  this  example,  particularly  for  the  SC  of  “fire  munition”. 
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MMF  Application: 
Two  Battle  Tanks 


This  example  will  look  at  a  simplified  hypothetical  engagement. 

Context  (military,  political,  physical, ...) 

BLUFOR's  purpose,  mission  OPFOR's  purpose,  mission 


Index:  Location  in  time  and  space 


n 


Ktesion 


Tasks. 
Ope  i  at  10  ns 


£ 

cior 

ibiliti 

X 


Mission 

Tasks. 

Operations 


Functions, 

Capabilities 


Interactions 
_  &  Effect  _ 


\* 

F  orces. 
Component 


BLUFOR 


Functions 

Capabilities 

I  4 

0  T 

»  i  j 

F  orces. 
Components 

OPFOR 


Source: 

"Fundamentals  of  Ground  Combat  System  BallisticVulnerability/ Lethality";  Dertz,  et.  al..  pg  14 
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Figure  22.  An  application  using  MMF-two  main  battle  tanks. 

The  second  example  in  this  briefing  will  review  how  SCAP  can  be  used  to  model  the 
relationships  between  two  systems  in  a  force-on-force  engagement.  To  represent  the  actions  and 
timing  in  this  engagement,  the  Missions  and  Means  Framework  (MMF)  will  be  employed  in 
collaboration  with  SCAP.  MMF  is  a  well-documented  construct  and  is  a  foundation  principle  of 
Dietz,  et  al.1  The  seven  levels  of  MMF  are  depicted  in  figure  22.  As  MMF  had  been  discussed 
in  earlier  sessions  of  the  conference,  as  well  as  previous  conferences,  it  was  assumed  the 
audience  was  already  familiar  with  the  framework.  Therefore,  the  details  MMF  were  not 
discussed  in  this  presentation  at  the  conference. 

For  the  benefit  of  this  report,  a  very  brief  review  of  MMF  follows  that  was  not  covered  at  the 
conference.  A  full  treatment  and  explanation  of  MMF  can  be  found  in  Dietz  et  al. 1  By  studying 
MMF  as  depicted  in  the  second  chapter  of  the  above-mentioned  book,  it  appears  MMF  is  a 
construct  of  three  underlying  paradigms.  The  first  paradigm  will  define  the  relationships  of  a 
system’s  component  damage  state,  through  a  system’s  capabilities,  to  the  system’s  combat 


1  Dietz,  P.;  Reed,  H.;  Klopcic,  T.;  Walbert,  J.  Fundamentals  of  Ground  Combat  System  Ballistic  Vulnerability/Lethality, 
American  Institute  of  Aeronautics  and  Astronautics,  Inc.:  Reston,  VA,  2009. 
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utility.  The  second  paradigm  is  how  do  systems,  as  they  engage  and  interact  with  each  other, 
either  improve  or  degrade  components  and  capabilities  of  another  system  via  their  respective 
combat  utility.  The  third  paradigm  is  focused  on  the  larger  scale  operations.  As  the  component 
damage  state  and  the  combat  utility  of  the  hardware  changes  through  interactions,  the  effects  will 
integrate  into  the  higher-level  relationships  that  will  affect  changes  to  the  mission,  purpose,  and 
context.  It  can  be  noted  that  MMF  is  not  a  static  process,  but  rather  a  dynamic  application  of 
ever-changing  and  potentially  complex  relationships  between  systems. 
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MMF  Example 


M. 


•Tank  B  (OP FOR)  observes  Tank  A 
(BLUFOR)  move  into  effective  range 

♦All  Tank  B  components  are  functional 
•The  system  can  accomplish  the 
" Execute  Direct  Fire “  System  Capability 

•  An  anti-tank  round  is  fired. 


Tank  A  Tark  B 


TankB  detecting  and  firing  on  Tank  A 
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Figure  23.  MMF  Example-the  first  round  is  fired. 

The  initial  index  of  this  engagement  is  depicted  in  figure  23.  It  is  assumed  that  the  Opposition 
Force  (OPFOR)  tank  (Tank  B)  is  sitting  in  defilade  in  a  combat  zone.  The  primary  mission  of 
Tank  B  is  to  wait  for  a  possible  tank  from  the  Blue  Force  (BLUFOR)  and  prevent  it  from 
entering  a  specific  zone.  Assume  a  BLUFOR  tank  (Tank  A)  is  in  the  area  and  unknowingly 
enters  the  effective  combat  range  of  Tank  B. 

It  is  assumed  that  all  components  of  Tank  B  are  functioning  properly;  therefore,  it  has  the 
capability  to  observe  Tank  A  move  into  range.  A  decision  is  made  by  the  commander  of  Tank  B 
to  fire  on  Tank  A.  At  this  point,  the  map  of  Tank  B  is  referenced  (and  displayed  on  the  slide)  to 
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see  if  Tank  B  has  the  capability  to  fire  on  Tank  A.  As  all  firepower  components  and  sub-systems 
are  functional;  therefore,  all  system  functions  are  functional,  Tank  B  is  capable  of  firing  on  Tank 
A.  Therefore,  Tank  B  fires  an  anti-tank  munition  at  Tank  A. 


MMF  Example 


The  round  fired  from  Tank  B 
impacts  Tank  A  on  the  track  and 
road  wheels. 

■  The  interaction  of  the  round  with  the  track,  road 
wheels,  and  suspension  will  cause  those 
components  to  fail. 

■  The  only  resultant  capability  for  "Travel  Off- 
Road"  is  "NOT  possible." 
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Figure  24.  MMF  example-results  of  the  first  round. 

It  is  possible  to  show  how  the  decision  and  action  of  Tank  B  firing  a  round  will  affect  Tank  A. 
This  is  done  by  advancing  the  index  within  MMF  to  the  time  that  the  round  from  Tank  B  impacts 
Tank  A.  By  utilizing  existing  methodologies  in  vulnerability  analysis,  it  is  possible  to  predict  the 
effect  of  the  munition  interacting  with  the  components  of  Tank  A.  The  resultant  damage  state  of 
the  components,  either  functional  or  dysfunctional,  can  then  be  supplied  into  the  map  of  Tank  A. 
By  tracing  the  effect  of  dysfunctional  components  through  the  fault  trees,  it  is  concluded  that 
Tank  A  is  unable  to  travel  further,  which  is  a  traditional  Mobility  Loss  of  Function  (MLoF).  The 
portion  of  the  map  for  Tank  A,  focusing  on  some  of  the  mobility  components,  is  shown  in 
figure  24. 
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MMF  Example 


Tank  A  returns  fire  on  Tank  B. 

♦All  firepower  components  are  functional. 
•  Capable  of  all  Firepower  System 
Capabilities. 
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Figure  25.  MMF  example-the  second  round  is  fired. 


After  the  damage  from  the  first  round  is  assessed,  MMF  will  advance  to  the  next  time  index, 
which  is  depicted  in  figure  25.  The  first  interaction  between  the  two  tanks  did  result  in  a 
complete  loss  of  capability  for  Tank  A  to  move  out  of  combat  zone,  but  all  components  for  the 
main  gun  are  undamaged.  Therefore,  using  the  map  for  Tank  A  as  shown  in  this  graphic,  it  is 
evident  that  Tank  A  is  able  to  fire  directly  on  Tank  B  in  a  return-fire  capacity.  A  decision  is 
made  by  the  commander  of  Tank  A  to  return  fire,  and  a  munition  is  sent  down-range  to  Tank  B. 
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MMF  Example 


Al 


The  round  from  Tank  A  impacts  the 
side  of  Tank  B. 

•  The  penetratorfrom  the  Tank  A  passes  through  the 
armor  of  the  TankB. 

■  Upon  entering  the  interior,  either  spall  or  the  main 
penetrator  interact  with  energetic  material 

■  This  interaction  results  in  a  catastrophic  detonation. 
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Figure  26.  MMF  example-the  results  of  the  second  round. 

The  next  time  index  in  MMF  is  when  the  round  from  Tank  A  impacts  on  Tank  B,  which  is 
depicted  in  figure  26.  By  again  utilizing  existing  methodologies,  it  is  possible  to  determine  what 
components  in  Tank  B  will  be  damaged  and  rendered  dysfunctional.  In  this  example,  it  is 
assumed  that  the  damaged  components  will  be  some  form  of  energetic  material  inside  of  Tank  B 
and  will  result  in  a  catastrophic  detonation. 
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MMF  Example 


Tank  B  has  experienced  a 
catastrophic  event. 

Due  to  the  loss  of  all  components: 

•  all  Tank  B  System  Functions  are  not  available. 

•  all  Tank  B  System  Capabilities  are  not  available. 
■  the  TankB  Mission  Tasks  cannot  be  completed. 
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Figure  27.  MMF  example-the  final  outcome. 

The  final  time  index  in  this  engagement  is  the  resultant  state  of  Tank  B  after  the  interaction  of 
the  munition  from  Tank  A  interacts  with  the  components  of  Tank  B.  This  index  is  depicted  in 
figure  27.  As  a  catastrophic  detonation  has  occurred  in  Tank  B,  it  is  assumed  all  components  of 
Tank  B  are  destroyed  and,  therefore,  dysfunctional.  Utilizing  the  map  from  the  SCAP,  one  can 
see  that  Tank  B  has  no  remaining  SC.  By  referencing  these  lost  SC  into  MMF,  it  is  shown  that 
Tank  B  has  no  remaining  combat  utility.  As  Tank  B  is  unable  to  perform  any  further  activities  in 
MMF,  it  has  failed  in  its  missions  and  is  no  longer  able  to  affect  the  outcome  of  the  conflict. 
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Networked  Forces  Application: 
UAV  as  a  Forward  Observer 


In  a  future  combat  scenario,  an  unmanned  aerial  vehicle  (UAV) 
functions  as  a  forward  observer  for  a  self-propelled  howitzer 
(SPH). 


Figure  28.  Networked  forces  example  -  introduction. 

Figure  28  introduces  the  third  and  final  example  of  this  presentation.  We  will  explore  how  an 
unmanned  aerial  vehicle  (UAV)  can  support  a  SPH  in  an  indirect  lire  support  mission.  This 
example  was  inspired  by  an  example  in  “Fundamentals  of  Ground  Combat 
Vulnerability/Lethality”  where  a  UAV  is  serving  as  a  forward  observer  for  a  ground  combat 
vehicle  when  explaining  possible  ways  to  depict  vulnerability  analysis  of  a  SoS. 
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UAV  Sample  Definition 
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The  UAV,  while  on  patrol,  flies 
within  detection  range  of  a  possible 
target  emitting  IR  radiation. 
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Figure  29.  Networked  forces  example-UAV  on  patrol. 

Assume  a  UAV  is  on  a  persistent  surveillance  mission  in  an  isolated  combat  zone.  No  BLUFOR 
units  are  in  the  vicinity  of  the  UAV’s  observed  zone.  As  the  UAV  patrols,  the  IR  sensor  on  the 
UAV  moves  closer  to  an  object  on  the  ground  that  is  emitting  an  IR  signature.  We  will  assume 
that  all  components  on  the  UAV  are  functional,  as  seen  in  figure  29.  Therefore,  the  IR  sensor 
system  is  functional  and  will  use  the  probability  of  detection  as  shown  in  the  graph  for  all  signals 
it  encounters.  Assume  the  IR  sensor  system  is  at  a  known  distance  from  the  potential  target,  and 
the  IR  signal  is  considered  “maximum”  due  to  inadequate  thennal  shielding  of  the  object  on  the 
ground.  Using  the  discussion  from  earlier,  we  will  see  that  conditions  on  the  UAV  (range,  signal 
strength)  shows  that  it  is  capable  of  detecting  the  IR  signature  with  a  success  rate  of  about  60%. 

As  we  assume  this  would  be  the  situation  as  currently  described  in  a  hypothetical  SoS 
simulation,  a  random  draw  will  occur  to  see  if  the  UAV  detects  the  target  using  a  Bernoulli  trial 
with  a  probability  of  success  of  60%.  In  this  case  it  is  assumed  that  the  Bernoulli  trial  produces  a 
successful  result,  and,  therefore,  the  system  function  of  “detect  signature”  is  successful  and  the 
UAV  detects  a  target  of  opportunity. 
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UAV  Sample  Definition 


Because  the  UAV  detected  the 
target,  it  will  send  a  communication 
to  the  emplaced  SPH. 
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Figure  30.  Networked  forces  example-UAV  sending  communication. 

As  the  UAV  has  successfully  detected  a  target  of  opportunity,  a  communication  will  be  sent  to  a 
fire  support  battalion.  The  map  depicted  in  figure  30  shows  components  for  the  antenna  sub¬ 
system.  These  components  are  shown  to  be  functional,  and  it  is  assumed  all  other  critical 
communications  sub-systems  are  also  functional.  Therefore,  the  UAV  has  the  capability  to  send 
a  long-range  communication. 
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Figure  31.  Networked  forces  example-howitzer  receives  communication. 

Changing  our  attention  to  the  emplaced  fire  support  battalion,  it  is  assumed  that  all  components 
critical  to  communication  are  functional.  This  assumption  is  depicted  in  figure  3 1 .  Therefore, 
the  SPH  of  interest  is  capable  of  receiving  the  communication  from  the  UAV. 
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SPH  Sample  Definition 


Since  all  firepower  components  are 
functional,  the  SPH  is  able  to  execute  the 
indirect  fire  mission. 
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Figure  32.  Networked  forces  example-howitzer  fires  munition. 

Recalling  the  sample  definition  from  earlier  in  the  presentation,  we  can  see  in  figure  32  that  the 
SPH  is  capable  of  firing  on  the  target  in  an  indirect  fire  mission. 
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Networked  Systems  Mission 


Connect  systems  by  mutual  System  Capabilities. 

•  As  the  UAV  detected  the  target,  it  was  able  to  send  the  information  to 
the  SPH . 
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Figure  33.  Networked  forces  example-linking  systems  by  SCs. 

As  discussed  in  this  example,  and  depicted  in  figure  33,  the  maps  for  systems  within  a 
system-of-systems  are  linked  by  mutual  SC.  Due  to  this  linkage,  it  is  possible  to  directly 
correlate  the  component  state  of  one  system  to  the  capability  of  a  networked  system  and  also  to 
determine  the  overall  effect  on  a  mission  vignette.  This  has  not  been  possible  with  traditional 
vulnerability/lethality  (V/L)  methodologies. 

If  a  critical  communications  component  of  either  system  was  dysfunctional,  then  it  would  be 
possible  to  determine  the  overall  combat  utility  of  the  SoS  due  to  the  lost  communication.  In  this 
example  the  fire  mission  would  not  occur,  and  a  mission  to  suppress  hostile  activity  in  a  remote 
region  would  be  unsuccessful  even  though  one  system  would  be  fully  functional. 
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•  Traditionally,  MIL  analysis  has  focused  on  single  vehicle 
vulnerability. 

-  Example:  Firepower  Loss  of  Function  (F  LoF)  =  0.7 

-  Mission  context  averaged  across  all  missions. 

•  The  presented  process: 

-  Mission  context  is  maintained. 

-  The  single  vehicle  is  now  assessed  for  remaining  capability. 

-  Reports  ability  to  complete  tasks. 

-  Reports  ability  to  complete  mission. 

•  By  quantitatively  defining  a  system's  functionality  and  linking 
to  descriptive  tasks,  we  are  able  to  link  independent  systems 
and  evaluate  the  impact  to  the  mission. 
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Figure  34.  Summary. 


The  summary  of  the  presentation  is  in  figure  34. 
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List  of  Symbols,  Abbreviations,  and  Acronyms 


ARL 

U.S.  Army  Research  Laboratory 

AT&L 

Office  of  the  Under  Secretary  of  Defense 

ATEC 

Army  Test  and  Evaluation  Command 

AUTL 

Army  Universal  Task  List 

BLUFOR 

Blue  Force 

DoD 

Department  of  Defense 

DOT&E 

Director,  Operational  Test  and  Evaluation 

EW 

electronic  warfare 

IR 

Infrared 

MLoF 

Loss  of  Function 

MBT&E 

Mission-Based  Test  and  Evaluation 

MMF 

Missions  and  Means  Framework 

NDIA 

National  Defense  Industrial  Association 

OPFOR 

Opposition  Force 

Pcd  h 

Probability  of  Component  Dysfunction  given  a  Hit 

Pk 

Probability  of  Kill 

PSF 

probabilistic  system  function 

SC 

system  capability 

SCAP 

System  Capabilities  Analytic  Process 

SES 

Senior  Executive  Service 

SLAD 

Survivability  Lethality  Analysis  Directorate 

SoS 

system  of  systems 
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SPH 

T&E 

UAV 

V/L 


Self-propelled  howitzer 
Test  and  Evaluation 
Unmanned  Aerial  Vehicle 
vulnerability/lethality 
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